>I looked but didn't see much discussion on this?

There hasn't been as much discussion of *SM security as in other
areas where we are trying to keep our heads above water, but that
is not to say that security is not an important issue.  ADSM's
security is rather "old-school", where upper- and lower-case
userids and passwords are the same thing rather than distinctly
different.  It could use modernization.  Whereas it's not an
operational issue it won't get much attention on ADSM-L.  There
are requirements outstanding to improve *SM security, and Tivoli
intentions to do so, but feel free to contribute your requirements
on ADSM-R as further customer impetus to that movement.
   Richard Sims, BU